I have a user that is being infinitely redirected in our app. The webpage loads auth0, shows a pop up, then redirects the user again. It doesn’t end. Every time it redirects, the ‘state’ value is different. Is there some way to decode this “state” and see what its doing? Here’s a sample of ONE of …

Hi @truescope , Thank you for sending this info and the code! I was able to spin up the example app. In the Auth0Provider, if you update auddience to audience, you’ll be able to use: getToken(config.managementApi); Without an infinite loop. When your app requests a token that has a different aud…

Hi @truescope , The state is only encoded if something is set by the client application in the /authorize request. For example, when the client application passed the state abc123 in the authorization request: tenant.auth0.com/authorize?...&state=abc123 Then it will be passed back to the client a…

Hi @stephanie.chamblee Thanks for your response. I am using the “ @auth0 /auth0-react” library, v1.4.0. I can easily reproduce the issue by open a new incognito window using chrome v90.0.4430.212 navigate to my website https://[my site] auth0’s sign in form appears in the page, so I enter the det…

Thank you for the additional context, @truescope ! In the linked topic and in this case, it sounds like blocked third-party cookies could be the cause. To confirm, you can try adding the cacheLocation config to the Auth0Provider if you haven’t done so already: const onRedirectCallback = (appState) …

I’ve followed your recommendation by adjusting the <Auth0Provider .../> to include useRefreshTokens={true} and cacheLocation="localstorage" ensured that any scopes are also passed into the Auth0Provider (yes we do use getAccessTokenSilently) we do actually use a custom domain But it still seems …

Hi @truescope , Are you passing the custom domain as the domain in the Auth0Provider? [image] Configure Features to Use Custom Domains Learn how to configure a custom domain for Auth0 authentication features.

Ahhh! Spelling error in auddience! After fixing that, I was able to confirm that the overall issue was incorrectly using the management api’s audience, instead of my custom api’s audience as the Auth0Provider audience value. It seems to only appear as an issue in Chrome’s incognito mode. Thanks fo…

App infinitely redirecting after login

Get Help

Topic		Replies	Views
Auth0-react in incognito mode running infinite redirect loop Get Help auth0-react , login-experience , sdks-quickstarts	2	2294	December 4, 2024
loginWithRedirect leads to infinite loop on Incognito & Safari Get Help login-experience , login-prompt-new-experience	1	2527	April 30, 2023
App infinitely redirecting after login ReactJS {PLEASE HELP} Get Help auth0 , login	2	6584	August 1, 2022
Unable to login to AUth0 in incognito mode Keeps reloading the browser window Archived login	11	12207	June 21, 2021
Getting invalid state on redirect Get Help login-experience , new-universal-login-experience	7	7885	July 19, 2023

App infinitely redirecting after login

Related topics